Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d186ad9d-6c29-3974-aeaf-112669bffb14.roa
File:                     d186ad9d-6c29-3974-aeaf-112669bffb14.roa (raw, json)
Hash identifier:          SuhRnjkrV9PFDVFBPRClULiE6ZG1PK+x18ca/42p8CM=
Subject key identifier:   FE:E8:15:EF:D1:DB:9C:E4:EF:A7:8A:49:13:87:57:5B:FC:F9:57:4F
Certificate issuer:       /CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
Certificate serial:       010D0C9F4328584AD23C182E1FEC519A2195DBE0
Authority key identifier: 1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d186ad9d-6c29-3974-aeaf-112669bffb14.roa
Signing time:             Mon 11 Aug 2025 13:00:40 +0000
ROA not before:           Mon 11 Aug 2025 13:00:40 +0000
ROA not after:            Sun 09 Nov 2025 14:00:40 +0000
asID:                     397222
IP address blocks:        2610:a1:3000::/40 maxlen: 48
Validation:               OK
Signature path:           rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/a73420cb-b3cc-4b03-bda7-1be204933ae5.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Sun 24 Aug 2025 14:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:4a:d2:3c:18:2e:1f:ec:51:9a:21:95:db:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=abf41935-3229-4ec6-a5e6-4cf4b4ce8243
        Validity
            Not Before: Aug 11 13:00:40 2025 GMT
            Not After : Nov  9 14:00:40 2025 GMT
        Subject: CN=7504530c-5dc4-43aa-a1db-4c979d721ebd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:b0:cc:0d:38:6b:c7:68:2c:fd:7a:18:09:68:
                    45:0e:e7:31:e0:fa:73:73:6b:95:60:9d:02:3c:9b:
                    e0:83:91:b0:8f:f6:b4:fc:b6:95:5d:6a:6d:07:73:
                    cf:00:ef:c7:3a:8e:e9:ee:23:80:49:5d:ba:19:fb:
                    21:57:4a:d6:ea:d4:f0:fb:5e:c4:7f:0b:da:7b:f2:
                    e0:53:2d:20:a5:c5:54:6d:36:35:67:b5:43:b3:0a:
                    2a:b3:a1:da:1e:00:2d:15:76:e2:84:21:4a:6f:d4:
                    1d:05:1c:dd:3c:67:5c:ee:89:37:ee:a8:78:0c:26:
                    b1:91:3c:9d:16:de:68:52:76:f4:d0:89:e5:50:2c:
                    f6:18:ff:15:01:2a:87:35:0a:90:6c:61:ba:aa:36:
                    ea:f6:25:bc:3f:0e:2e:45:6b:fb:5a:8d:b2:e2:5b:
                    ce:b2:b7:04:69:48:ac:2c:60:b2:f5:bd:c9:c9:5c:
                    06:1c:b6:cc:70:7a:4e:69:89:48:ab:f5:24:7c:45:
                    1c:a1:dd:c6:da:2d:60:fa:3f:fb:76:af:6c:f3:f4:
                    13:6f:87:49:6c:31:30:c6:0c:e4:1d:f5:9d:2b:e8:
                    82:73:20:39:8c:03:9d:24:de:17:ab:43:8e:b4:cb:
                    e7:0e:25:63:01:3c:d4:cb:e7:84:ed:bd:ce:3c:d2:
                    2e:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:E8:15:EF:D1:DB:9C:E4:EF:A7:8A:49:13:87:57:5B:FC:F9:57:4F
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/d186ad9d-6c29-3974-aeaf-112669bffb14.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.crl

            X509v3 Authority Key Identifier:
                keyid:1C:70:48:7F:61:51:94:D2:2E:CA:8C:AB:CD:3C:F7:39:F7:5B:63:B2

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/a73420cb-b3cc-4b03-bda7-1be204933ae5/abf41935-3229-4ec6-a5e6-4cf4b4ce8243.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2610:a1:3000::/40

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         73:45:bc:91:6e:c0:fe:1a:dd:ef:a1:f3:48:4a:09:cf:f1:1b:
         61:c7:c7:f9:1f:ca:67:62:df:2e:65:79:e3:0b:4f:f7:50:54:
         ae:cd:13:c6:e8:2f:7c:e5:cf:4f:4f:97:5a:95:90:d2:3a:7e:
         36:5a:ba:4b:9d:09:38:4f:05:81:f8:cc:a8:60:26:63:b7:8b:
         59:43:8d:48:e7:0e:7e:eb:cd:86:46:62:87:56:f3:7c:96:2c:
         0f:fa:06:4d:ed:a2:0a:bd:ab:77:33:51:35:95:fe:56:8e:db:
         52:67:be:f3:b3:74:49:55:31:db:25:54:64:b4:d1:e4:c7:23:
         7e:90:2a:0b:bf:b0:a2:1d:25:04:46:e9:56:37:d7:ed:05:b0:
         46:7b:b2:b5:07:8b:18:a6:d1:c7:bf:91:de:49:89:8b:1f:05:
         e9:2e:6b:15:c5:14:6f:77:df:1f:fc:66:4f:c3:52:09:04:17:
         26:8c:f4:30:03:d1:f0:73:b0:1c:1a:91:93:de:a2:9f:ce:68:
         60:9b:27:1d:84:2d:8f:80:16:af:3d:d3:51:05:4f:1a:c6:31:
         21:5a:bf:8d:60:a1:cc:19:da:82:f9:c8:04:6c:ec:04:24:03:
         33:a9:1a:64:6d:4f:c9:fc:21:5f:5c:a1:ca:c1:b5:bd:29:d6:
         7e:95:ae:ac
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 14:21:01 2025 by rpki-client